BSOD + random crash

eim · Feb 3, 2011

I'm having problem with random program crashes and sometimes even BSOD.
Somedays my PC feels like an old 286....

Is there anybody out there who can help me find out whats causing it?

Tnx for any tips.

eim · Feb 3, 2011

Forgot to say... i have been running Memtest86, intelburn, Prime for hours... no problems found :/

CarlTR6 · Feb 3, 2011

I looked at your four most recent dumps. Each has a different bugcheck code. That usually indicates a hardware or hardware related problem. The dumps blame various Windows system files, which are very unlikely to be the real causes.

1. I recommend that you uninstall Daemon Tools. It is notorious for causing BSOD's on Win 7 systems.

2. After you uninstall Daemon Tools, please enable Driver Verifier carefully following the instructions in this tutotial: Driver Verifier - Enable and Disable. If Driver Verifier encounters a faulty driver, it will trigger a BSOD. Upload any and all Driver Verifier enabled dumps.

Code:

Windows 7 Kernel Version 7600 MP (8 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 7600.16617.amd64fre.win7_gdr.100618-1621
Machine Name:
Kernel base = 0xfffff800`02a5f000 PsLoadedModuleList = 0xfffff800`02c9ce50
Debug session time: Wed Jan 26 19:34:10.351 2011 (GMT-5)
System Uptime: 0 days 0:00:16.444
Loading Kernel Symbols
...............................................................
.......................................
Loading User Symbols
Loading unloaded module list
.
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck 1000007E, {ffffffffc0000096, fffff880053e2e00, fffff8800335adf8, fffff8800335a660}

Probably caused by : rasl2tp.sys ( rasl2tp!GetRegistrySettings+2d0 )

Followup: MachineOwner
---------

7: kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

SYSTEM_THREAD_EXCEPTION_NOT_HANDLED_M (1000007e)
This is a very common bugcheck.  Usually the exception address pinpoints
the driver/function that caused the problem.  Always note this address
as well as the link date of the driver/image that contains this address.
Some common problems are exception code 0x80000003.  This means a hard
coded breakpoint or assertion was hit, but this system was booted
/NODEBUG.  This is not supposed to happen as developers should never have
hardcoded breakpoints in retail code, but ...
If this happens, make sure a debugger gets connected, and the
system is booted /DEBUG.  This will let us see why this breakpoint is
happening.
Arguments:
Arg1: ffffffffc0000096, The exception code that was not handled
Arg2: fffff880053e2e00, The address that the exception occurred at
Arg3: fffff8800335adf8, Exception Record Address
Arg4: fffff8800335a660, Context Record Address

Debugging Details:
------------------


EXCEPTION_CODE: (NTSTATUS) 0xc0000096 - {EXCEPTION}  Privileged instruction.

FAULTING_IP: 
rasl2tp!GetRegistrySettings+2d0
fffff880`053e2e00 4c8d4c2448      lea     r9,[rsp+48h]

EXCEPTION_RECORD:  fffff8800335adf8 -- (.exr 0xfffff8800335adf8)
ExceptionAddress: fffff880053e2e00 (rasl2tp!GetRegistrySettings+0x00000000000002d0)
   ExceptionCode: c0000096
  ExceptionFlags: 00000000
NumberParameters: 0

CONTEXT:  fffff8800335a660 -- (.cxr 0xfffff8800335a660)
rax=fffff880053e3550 rbx=000000000000001c rcx=f8800147b0d30000
rdx=fffff88003174000 rsi=fffff8800335b17c rdi=0000000000000022
rip=fffff880053e2e00 rsp=fffff8800335b030 rbp=0000000000000000
 r8=fffffa800688a070  r9=0000000000000030 r10=fffff80002a5f000
r11=000000000000072d r12=0000000000000010 r13=000000000000001a
r14=000000000000001e r15=0000000000000018
iopl=0         nv up ei ng nz na pe nc
cs=0010  ss=0018  ds=002b  es=002b  fs=0053  gs=002b             efl=00010282
rasl2tp!GetRegistrySettings+0x2d0:
fffff880`053e2e00 4c8d4c2448      lea     r9,[rsp+48h]
Resetting default scope

CUSTOMER_CRASH_COUNT:  1

PROCESS_NAME:  System

CURRENT_IRQL:  0

ERROR_CODE: (NTSTATUS) 0xc0000096 - {EXCEPTION}  Privileged instruction.

BUGCHECK_STR:  0x7E

DEFAULT_BUCKET_ID:  STATUS_PRIVILEGED_INSTRUCTION

LOCK_ADDRESS:  fffff80002cd3400 -- (!locks fffff80002cd3400)

Resource @ nt!PiEngineLock (0xfffff80002cd3400)    Available

WARNING: SystemResourcesList->Flink chain invalid. Resource may be corrupted, or already deleted.


WARNING: SystemResourcesList->Blink chain invalid. Resource may be corrupted, or already deleted.

1 total locks

PNP_TRIAGE: 
    Lock address  : 0xfffff80002cd3400
    Thread Count  : 0
    Thread address: 0x0000000000000000
    Thread wait   : 0x0

LAST_CONTROL_TRANSFER:  from fffff880053e26ee to fffff880053e2e00

STACK_TEXT:  
fffff880`0335b030 fffff880`053e26ee : fffffa80`06bb8a5c fffffa80`06bb8a58 fffffa80`06bb8a40 fffff800`02dd82c0 : rasl2tp!GetRegistrySettings+0x2d0
fffff880`0335b0c0 fffff880`014c0f61 : ffffffff`00000000 00000000`00000005 fffffa80`0672ef70 00000000`000007ff : rasl2tp!LmpInitialize+0x1ee
fffff880`0335b270 fffff880`014bb793 : fffffa80`05ea19d0 fffffa80`066c4020 00000000`00000000 01cbbdb9`ea0d04c4 : ndis! ?? ::LNCPHCLB::`string'+0x2f0d
fffff880`0335b630 fffff880`014bd86c : fffffa80`05ea19d0 fffffa80`066c2050 00000000`00000000 fffffa80`04f56700 : ndis!ndisInitializeAdapter+0x113
fffff880`0335b690 fffff880`014bb466 : fffffa80`066c21a0 fffffa80`05ea19d0 00000000`00000000 fffffa80`05ea19d0 : ndis!ndisPnPStartDevice+0xac
fffff880`0335b6f0 fffff800`02e8e06e : 00000000`00000000 fffffa80`05ea19d0 fffffa80`066c2050 fffff880`0335b820 : ndis!ndisPnPDispatch+0x246
fffff880`0335b790 fffff800`02bc914d : fffffa80`04f56700 fffffa80`06bafbf0 fffff800`02bced30 00000000`00000000 : nt!PnpAsynchronousCall+0xce
fffff880`0335b7d0 fffff800`02e98db6 : fffff800`02cd31c0 fffffa80`04f56430 fffffa80`06bafbf0 fffffa80`04f565d8 : nt!PnpStartDevice+0x11d
fffff880`0335b890 fffff800`02e99054 : fffffa80`04f56430 fffffa80`04f30019 fffffa80`04f36350 00000000`00000001 : nt!PnpStartDeviceNode+0x156
fffff880`0335b920 fffff800`02ebc346 : fffffa80`04f56430 fffffa80`04f36350 00000000`00000002 00000000`00000000 : nt!PipProcessStartPhase1+0x74
fffff880`0335b950 fffff800`02ebc7fc : fffffa80`063bd050 00000000`00000000 00000000`00000000 00000000`00000000 : nt!PipProcessDevNodeTree+0x296
fffff880`0335bbc0 fffff800`02bd1382 : 00000001`00000003 00000000`00000000 00000000`32706e50 00000000`00000084 : nt!PiProcessStartSystemDevices+0x7c
fffff880`0335bc10 fffff800`02adc961 : fffff800`02bd1080 fffff800`02f26e01 fffffa80`04f06b00 00000000`00000000 : nt!PnpDeviceActionWorker+0x302
fffff880`0335bcb0 fffff800`02d73c06 : 00000000`00000000 fffffa80`04f06b60 00000000`00000080 fffffa80`04e899e0 : nt!ExpWorkerThread+0x111
fffff880`0335bd40 fffff800`02aadc26 : fffff880`03167180 fffffa80`04f06b60 fffff880`031720c0 00000000`00000000 : nt!PspSystemThreadStartup+0x5a
fffff880`0335bd80 00000000`00000000 : fffff880`0335c000 fffff880`03356000 fffff880`033596d0 00000000`00000000 : nt!KxStartSystemThread+0x16


FOLLOWUP_IP: 
rasl2tp!GetRegistrySettings+2d0
fffff880`053e2e00 4c8d4c2448      lea     r9,[rsp+48h]

SYMBOL_STACK_INDEX:  0

SYMBOL_NAME:  rasl2tp!GetRegistrySettings+2d0

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: rasl2tp

IMAGE_NAME:  rasl2tp.sys

DEBUG_FLR_IMAGE_TIMESTAMP:  4a5bcce3

STACK_COMMAND:  .cxr 0xfffff8800335a660 ; kb

FAILURE_BUCKET_ID:  X64_0x7E_rasl2tp!GetRegistrySettings+2d0

BUCKET_ID:  X64_0x7E_rasl2tp!GetRegistrySettings+2d0

Followup: MachineOwner
---------

Debug session time: Fri Jan 28 02:26:44.532 2011 (GMT-5)
System Uptime: 0 days 1:27:13.625
Loading Kernel Symbols
...............................................................
................................................................
................
Loading User Symbols
Loading unloaded module list
......
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck 24, {1904fb, fffff880096c1668, fffff880096c0ed0, fffff80002a954b4}

Probably caused by : Ntfs.sys ( Ntfs!NtfsAcquireFcbWithPaging+13b )

Followup: MachineOwner
---------

4: kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

NTFS_FILE_SYSTEM (24)
    If you see NtfsExceptionFilter on the stack then the 2nd and 3rd
    parameters are the exception record and context record. Do a .cxr
    on the 3rd parameter and then kb to obtain a more informative stack
    trace.
Arguments:
Arg1: 00000000001904fb
Arg2: fffff880096c1668
Arg3: fffff880096c0ed0
Arg4: fffff80002a954b4

Debugging Details:
------------------


EXCEPTION_RECORD:  fffff880096c1668 -- (.exr 0xfffff880096c1668)
ExceptionAddress: fffff80002a954b4 (nt!ExAcquireResourceExclusiveLite+0x0000000000000054)
   ExceptionCode: c0000005 (Access violation)
  ExceptionFlags: 00000000
NumberParameters: 2
   Parameter[0]: 0000000000000001
   Parameter[1]: 00000000000000a0
Attempt to write to address 00000000000000a0

CONTEXT:  fffff880096c0ed0 -- (.cxr 0xfffff880096c0ed0)
rax=fffffa8005b60401 rbx=0000000000000040 rcx=0000000000000040
rdx=0000000000000001 rsi=0000000000000000 rdi=fffff880009b1180
rip=fffff80002a954b4 rsp=fffff880096c18a0 rbp=0000000000000001
 r8=0000000000000702  r9=0000000000000008 r10=0000000000020000
r11=fffff880096c1968 r12=0000000000000000 r13=00000000c00000d8
r14=fffffa8005b60440 r15=0000000000010001
iopl=0         nv up di pl zr na po nc
cs=0010  ss=0018  ds=002b  es=002b  fs=0053  gs=002b             efl=00010046
nt!ExAcquireResourceExclusiveLite+0x54:
fffff800`02a954b4 f0480fba696000  lock bts qword ptr [rcx+60h],0 ds:002b:00000000`000000a0=????????????????
Resetting default scope

CUSTOMER_CRASH_COUNT:  1

PROCESS_NAME:  Dropbox.exe

CURRENT_IRQL:  0

ERROR_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s.

EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s.

EXCEPTION_PARAMETER1:  0000000000000001

EXCEPTION_PARAMETER2:  00000000000000a0

WRITE_ADDRESS: GetPointerFromAddress: unable to read from fffff80002cc50e0
 00000000000000a0 

FOLLOWUP_IP: 
Ntfs!NtfsAcquireFcbWithPaging+13b
fffff880`0123810b 84c0            test    al,al

FAULTING_IP: 
nt!ExAcquireResourceExclusiveLite+54
fffff800`02a954b4 f0480fba696000  lock bts qword ptr [rcx+60h],0

BUGCHECK_STR:  0x24

DEFAULT_BUCKET_ID:  NULL_CLASS_PTR_DEREFERENCE

LAST_CONTROL_TRANSFER:  from fffff8800123810b to fffff80002a954b4

STACK_TEXT:  
fffff880`096c18a0 fffff880`0123810b : 00000000`c00000d8 00000000`00000009 00000000`00000000 00000000`00000090 : nt!ExAcquireResourceExclusiveLite+0x54
fffff880`096c1910 fffff880`012ac61d : 00000000`00000000 fffffa80`05b7e820 fffffa80`05b8cd80 00010000`00031401 : Ntfs!NtfsAcquireFcbWithPaging+0x13b
fffff880`096c1970 fffff880`012cfb04 : fffff880`09fc54b0 fffffa80`05b7e820 fffffa80`05b8cd80 00000000`00000000 : Ntfs!NtfsOpenFile+0xaf1
fffff880`096c1b50 fffff880`01238c0d : fffffa80`05b8cd80 fffffa80`05b7e820 fffff880`09fc54b0 fffffa80`05b60400 : Ntfs!NtfsCommonCreate+0xc54
fffff880`096c1d30 fffff800`02a855c7 : fffff880`09fc5420 00000000`00000000 00000000`00000000 00000000`00000000 : Ntfs!NtfsCommonCreateCallout+0x1d
fffff880`096c1d60 fffff800`02a85581 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KySwitchKernelStackCallout+0x27
fffff880`09fc52f0 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSwitchKernelStackContinue


SYMBOL_STACK_INDEX:  1

SYMBOL_NAME:  Ntfs!NtfsAcquireFcbWithPaging+13b

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: Ntfs

IMAGE_NAME:  Ntfs.sys

DEBUG_FLR_IMAGE_TIMESTAMP:  4a5bc14f

STACK_COMMAND:  .cxr 0xfffff880096c0ed0 ; kb

FAILURE_BUCKET_ID:  X64_0x24_Ntfs!NtfsAcquireFcbWithPaging+13b

BUCKET_ID:  X64_0x24_Ntfs!NtfsAcquireFcbWithPaging+13b

Followup: MachineOwner
---------

Debug session time: Wed Feb  2 04:31:03.930 2011 (GMT-5)
System Uptime: 0 days 0:12:28.022
Loading Kernel Symbols
...............................................................
................................................................
.........................
Loading User Symbols
Loading unloaded module list
.......
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck 7F, {8, 80050031, 6f8, fffff8800406212a}

Probably caused by : csc.sys ( csc!CscCleanupFobx+2a )

Followup: MachineOwner
---------

4: kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

UNEXPECTED_KERNEL_MODE_TRAP (7f)
This means a trap occurred in kernel mode, and it's a trap of a kind
that the kernel isn't allowed to have/catch (bound trap) or that
is always instant death (double fault).  The first number in the
bugcheck params is the number of the trap (8 = double fault, etc)
Consult an Intel x86 family manual to learn more about what these
traps are. Here is a *portion* of those codes:
If kv shows a taskGate
        use .tss on the part before the colon, then kv.
Else if kv shows a trapframe
        use .trap on that value
Else
        .trap on the appropriate frame will show where the trap was taken
        (on x86, this will be the ebp that goes with the procedure KiTrap)
Endif
kb will then show the corrected stack.
Arguments:
Arg1: 0000000000000008, EXCEPTION_DOUBLE_FAULT
Arg2: 0000000080050031
Arg3: 00000000000006f8
Arg4: fffff8800406212a

Debugging Details:
------------------


BUGCHECK_STR:  0x7f_8

CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT

PROCESS_NAME:  svchost.exe

CURRENT_IRQL:  0

LAST_CONTROL_TRANSFER:  from fffff80002a89ca9 to fffff80002a8a740

STACK_TEXT:  
fffff880`009b7de8 fffff800`02a89ca9 : 00000000`0000007f 00000000`00000008 00000000`80050031 00000000`000006f8 : nt!KeBugCheckEx
fffff880`009b7df0 fffff800`02a88172 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiBugCheckDispatch+0x69
fffff880`009b7f30 fffff880`0406212a : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiDoubleFaultAbort+0xb2
fffff880`096a7fa0 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : csc!CscCleanupFobx+0x2a


STACK_COMMAND:  kb

FOLLOWUP_IP: 
csc!CscCleanupFobx+2a
fffff880`0406212a 4889442450      mov     qword ptr [rsp+50h],rax

SYMBOL_STACK_INDEX:  3

SYMBOL_NAME:  csc!CscCleanupFobx+2a

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: csc

IMAGE_NAME:  csc.sys

DEBUG_FLR_IMAGE_TIMESTAMP:  4a5bc22a

FAILURE_BUCKET_ID:  X64_0x7f_8_csc!CscCleanupFobx+2a

BUCKET_ID:  X64_0x7f_8_csc!CscCleanupFobx+2a

Followup: MachineOwner
---------

Debug session time: Wed Feb  2 17:20:19.385 2011 (GMT-5)
System Uptime: 0 days 0:02:23.478
Loading Kernel Symbols
...............................................................
................................................................
.........................
Loading User Symbols
Loading unloaded module list
......
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck 3B, {c0000005, fffff80002d5674d, fffff88008f36770, 0}

Probably caused by : ntkrnlmp.exe ( nt!CmpKcbCacheLookup+1dd )

Followup: MachineOwner
---------

0: kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

SYSTEM_SERVICE_EXCEPTION (3b)
An exception happened while executing a system service routine.
Arguments:
Arg1: 00000000c0000005, Exception code that caused the bugcheck
Arg2: fffff80002d5674d, Address of the exception record for the exception that caused the bugcheck
Arg3: fffff88008f36770, Address of the context record for the exception that caused the bugcheck
Arg4: 0000000000000000, zero.

Debugging Details:
------------------


EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s.

FAULTING_IP: 
nt!CmpKcbCacheLookup+1dd
fffff800`02d5674d 418b45f4        mov     eax,dword ptr [r13-0Ch]

CONTEXT:  fffff88008f36770 -- (.cxr 0xfffff88008f36770)
rax=0000000000000008 rbx=0000000000000000 rcx=0000000000000b04
rdx=0000000009e2c4b4 rsi=fffff8a000919a18 rdi=fffff88008f372c0
rip=fffff80002d5674d rsp=fffff88008f37140 rbp=fffff8a000919420
 r8=0000000000000009  r9=0000000000000000 r10=0000000000000004
r11=fffff88008f372c0 r12=fffff8a0012ca4a8 r13=0000000000000020
r14=0000000000000000 r15=0000000000000001
iopl=0         nv up ei pl nz na pe nc
cs=0010  ss=0018  ds=002b  es=002b  fs=0053  gs=002b             efl=00010202
nt!CmpKcbCacheLookup+0x1dd:
fffff800`02d5674d 418b45f4        mov     eax,dword ptr [r13-0Ch] ds:002b:00000000`00000014=????????
Resetting default scope

CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT

BUGCHECK_STR:  0x3B

PROCESS_NAME:  csrss.exe

CURRENT_IRQL:  0

LAST_CONTROL_TRANSFER:  from 0000000000000000 to fffff80002d5674d

STACK_TEXT:  
fffff880`08f37140 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!CmpKcbCacheLookup+0x1dd


FOLLOWUP_IP: 
nt!CmpKcbCacheLookup+1dd
fffff800`02d5674d 418b45f4        mov     eax,dword ptr [r13-0Ch]

SYMBOL_STACK_INDEX:  0

SYMBOL_NAME:  nt!CmpKcbCacheLookup+1dd

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: nt

IMAGE_NAME:  ntkrnlmp.exe

DEBUG_FLR_IMAGE_TIMESTAMP:  4c1c44a9

STACK_COMMAND:  .cxr 0xfffff88008f36770 ; kb

FAILURE_BUCKET_ID:  X64_0x3B_nt!CmpKcbCacheLookup+1dd

BUCKET_ID:  X64_0x3B_nt!CmpKcbCacheLookup+1dd

Followup: MachineOwner
---------

0: kd> lmtsmn
start             end                 module name
fffff880`06c6e000 fffff880`06cac000   1394ohci 1394ohci.sys Mon Jul 13 20:07:12 2009 (4A5BCC30)
fffff880`00f9d000 fffff880`00ff4000   ACPI     ACPI.sys     Mon Jul 13 19:19:34 2009 (4A5BC106)
fffff880`02c74000 fffff880`02cfe000   afd      afd.sys      Mon Jul 13 19:21:40 2009 (4A5BC184)
fffff880`06cc5000 fffff880`06cdb000   AgileVpn AgileVpn.sys Mon Jul 13 20:10:24 2009 (4A5BCCF0)
fffff880`00ddf000 fffff880`00dea000   amdxata  amdxata.sys  Tue May 19 13:56:59 2009 (4A12F2EB)
fffff880`00cda000 fffff880`00ce3000   atapi    atapi.sys    Mon Jul 13 19:19:47 2009 (4A5BC113)
fffff880`00db5000 fffff880`00ddf000   ataport  ataport.SYS  Mon Jul 13 19:19:52 2009 (4A5BC118)
fffff960`00900000 fffff960`00961000   ATMFD    ATMFD.DLL    Tue Oct 19 23:05:45 2010 (4CBE5C89)
fffff880`0191c000 fffff880`01923000   Beep     Beep.SYS     Mon Jul 13 20:00:13 2009 (4A5BCA8D)
fffff880`03d81000 fffff880`03d92000   blbdrive blbdrive.sys Mon Jul 13 19:35:59 2009 (4A5BC4DF)
fffff880`074c8000 fffff880`074e6000   bowser   bowser.sys   Mon Jul 13 19:23:50 2009 (4A5BC206)
fffff960`006b0000 fffff960`006d7000   cdd      cdd.dll      Wed May 19 15:48:26 2010 (4BF4408A)
fffff880`018b8000 fffff880`018e2000   cdrom    cdrom.sys    Mon Jul 13 19:19:54 2009 (4A5BC11A)
fffff880`00c00000 fffff880`00cc0000   CI       CI.dll       Mon Jul 13 21:32:13 2009 (4A5BE01D)
fffff880`01852000 fffff880`01882000   CLASSPNP CLASSPNP.SYS Mon Jul 13 19:19:58 2009 (4A5BC11E)
fffff880`00d57000 fffff880`00db5000   CLFS     CLFS.SYS     Mon Jul 13 19:19:57 2009 (4A5BC11D)
fffff880`0117f000 fffff880`011f2000   cng      cng.sys      Mon Jul 13 19:49:40 2009 (4A5BC814)
fffff880`06cb5000 fffff880`06cc5000   CompositeBus CompositeBus.sys Mon Jul 13 20:00:33 2009 (4A5BCAA1)
fffff880`070d1000 fffff880`070da000   cpuz135_x64 cpuz135_x64.sys Tue Nov 09 08:33:36 2010 (4CD94DB0)
fffff880`089a9000 fffff880`089b7000   crashdmp crashdmp.sys Mon Jul 13 20:01:01 2009 (4A5BCABD)
fffff880`03ce0000 fffff880`03d63000   csc      csc.sys      Mon Jul 13 19:24:26 2009 (4A5BC22A)
fffff880`03d63000 fffff880`03d81000   dfsc     dfsc.sys     Mon Jul 13 19:23:44 2009 (4A5BC200)
fffff880`019c8000 fffff880`019d7000   discache discache.sys Mon Jul 13 19:37:18 2009 (4A5BC52E)
fffff880`0120a000 fffff880`01220000   disk     disk.sys     Mon Jul 13 19:19:57 2009 (4A5BC11D)
fffff880`08975000 fffff880`08997000   drmk     drmk.sys     Mon Jul 13 21:01:25 2009 (4A5BD8E5)
fffff880`02d81000 fffff880`02dc4000   dtsoftbus01 dtsoftbus01.sys Thu Jan 13 03:27:08 2011 (4D2EB75C)
fffff880`0938f000 fffff880`09398000   DUMETR64 DUMETR64.SYS Thu Aug 19 15:13:29 2010 (4C6D8259)
fffff880`089c3000 fffff880`089cc000   dump_atapi dump_atapi.sys Mon Jul 13 19:19:47 2009 (4A5BC113)
fffff880`089b7000 fffff880`089c3000   dump_dumpata dump_dumpata.sys Mon Jul 13 19:19:47 2009 (4A5BC113)
fffff880`089cc000 fffff880`089df000   dump_dumpfve dump_dumpfve.sys Mon Jul 13 19:21:51 2009 (4A5BC18F)
fffff880`0899d000 fffff880`089a9000   Dxapi    Dxapi.sys    Mon Jul 13 19:38:28 2009 (4A5BC574)
fffff880`10acd000 fffff880`10bc1000   dxgkrnl  dxgkrnl.sys  Thu Oct 01 21:00:14 2009 (4AC5509E)
fffff880`03c02000 fffff880`03c48000   dxgmms1  dxgmms1.sys  Mon Jul 13 19:38:32 2009 (4A5BC578)
fffff880`0110d000 fffff880`01121000   fileinfo fileinfo.sys Mon Jul 13 19:34:25 2009 (4A5BC481)
fffff880`010c1000 fffff880`0110d000   fltmgr   fltmgr.sys   Mon Jul 13 19:19:59 2009 (4A5BC11F)
fffff880`01200000 fffff880`0120a000   Fs_Rec   Fs_Rec.sys   Mon Jul 13 19:19:45 2009 (4A5BC111)
fffff880`01086000 fffff880`010c0000   fvevol   fvevol.sys   Fri Sep 25 22:34:26 2009 (4ABD7DB2)
fffff880`0142b000 fffff880`01475000   fwpkclnt fwpkclnt.sys Mon Jul 13 19:21:08 2009 (4A5BC164)
fffff800`02fe6000 fffff800`0302f000   hal      hal.dll      Mon Jul 13 21:27:36 2009 (4A5BDF08)
fffff880`0fe00000 fffff880`0fe24000   HDAudBus HDAudBus.sys Mon Jul 13 20:06:13 2009 (4A5BCBF5)
fffff880`0860e000 fffff880`08627000   HIDCLASS HIDCLASS.SYS Mon Jul 13 20:06:21 2009 (4A5BCBFD)
fffff880`08627000 fffff880`0862f080   HIDPARSE HIDPARSE.SYS Mon Jul 13 20:06:17 2009 (4A5BCBF9)
fffff880`08600000 fffff880`0860e000   hidusb   hidusb.sys   Mon Jul 13 20:06:22 2009 (4A5BCBFE)
fffff880`07400000 fffff880`074c8000   HTTP     HTTP.sys     Mon Jul 13 19:22:16 2009 (4A5BC1A8)
fffff880`015f5000 fffff880`015fe000   hwpolicy hwpolicy.sys Mon Jul 13 19:19:22 2009 (4A5BC0FA)
fffff880`03db8000 fffff880`03dce000   intelppm intelppm.sys Mon Jul 13 19:19:25 2009 (4A5BC0FD)
fffff880`06d9b000 fffff880`06daa000   kbdclass kbdclass.sys Mon Jul 13 19:19:50 2009 (4A5BC116)
fffff880`08630000 fffff880`0863e000   kbdhid   kbdhid.sys   Mon Jul 13 20:00:20 2009 (4A5BCA94)
fffff800`00bb1000 fffff800`00bbb000   kdcom    kdcom.dll    Mon Jul 13 21:31:07 2009 (4A5BDFDB)
fffff880`01800000 fffff880`01843000   ks       ks.sys       Wed Mar 03 23:32:25 2010 (4B8F37D9)
fffff880`013cc000 fffff880`013e6000   ksecdd   ksecdd.sys   Mon Jul 13 19:20:54 2009 (4A5BC156)
fffff880`01400000 fffff880`0142b000   ksecpkg  ksecpkg.sys  Fri Dec 11 01:03:32 2009 (4B21E0B4)
fffff880`08997000 fffff880`0899c200   ksthunk  ksthunk.sys  Mon Jul 13 20:00:19 2009 (4A5BCA93)
fffff880`06dec000 fffff880`06defd80   LGBusEnum LGBusEnum.sys Mon Nov 23 20:36:48 2009 (4B0B38B0)
fffff880`09238000 fffff880`0923a480   LGVirHid LGVirHid.sys Mon Nov 23 20:36:48 2009 (4B0B38B0)
fffff880`0756a000 fffff880`0757f000   lltdio   lltdio.sys   Mon Jul 13 20:08:50 2009 (4A5BCC92)
fffff880`08659000 fffff880`0867c000   luafv    luafv.sys    Mon Jul 13 19:26:13 2009 (4A5BC295)
fffff880`00cff000 fffff880`00d43000   mcupdate_GenuineIntel mcupdate_GenuineIntel.dll Mon Jul 13 21:29:10 2009 (4A5BDF66)
fffff880`0863e000 fffff880`0864c000   monitor  monitor.sys  Mon Jul 13 19:38:52 2009 (4A5BC58C)
fffff880`06daa000 fffff880`06db9000   mouclass mouclass.sys Mon Jul 13 19:19:50 2009 (4A5BC116)
fffff880`0864c000 fffff880`08659000   mouhid   mouhid.sys   Mon Jul 13 20:00:20 2009 (4A5BCA94)
fffff880`00cc0000 fffff880`00cda000   mountmgr mountmgr.sys Mon Jul 13 19:19:54 2009 (4A5BC11A)
fffff880`018e2000 fffff880`01913000   MpFilter MpFilter.sys Tue Sep 14 20:19:28 2010 (4C901110)
fffff880`070da000 fffff880`070ea000   MpNWMon  MpNWMon.sys  Tue Sep 14 20:19:30 2010 (4C901112)
fffff880`07597000 fffff880`075af000   mpsdrv   mpsdrv.sys   Mon Jul 13 20:08:25 2009 (4A5BCC79)
fffff880`075af000 fffff880`075dc000   mrxsmb   mrxsmb.sys   Sat Feb 27 02:52:19 2010 (4B88CF33)
fffff880`07060000 fffff880`070ae000   mrxsmb10 mrxsmb10.sys Sat Feb 27 02:52:28 2010 (4B88CF3C)
fffff880`070ae000 fffff880`070d1000   mrxsmb20 mrxsmb20.sys Sat Feb 27 02:52:26 2010 (4B88CF3A)
fffff880`01981000 fffff880`0198c000   Msfs     Msfs.SYS     Mon Jul 13 19:19:47 2009 (4A5BC113)
fffff880`00e00000 fffff880`00e0a000   msisadrv msisadrv.sys Mon Jul 13 19:19:26 2009 (4A5BC0FE)
fffff880`01121000 fffff880`0117f000   msrpc    msrpc.sys    Mon Jul 13 19:21:32 2009 (4A5BC17C)
fffff880`02c5d000 fffff880`02c68000   mssmbios mssmbios.sys Mon Jul 13 19:31:10 2009 (4A5BC3BE)
fffff880`0148d000 fffff880`0149f000   mup      mup.sys      Mon Jul 13 19:23:45 2009 (4A5BC201)
fffff880`014a3000 fffff880`01595000   ndis     ndis.sys     Mon Jul 13 19:21:40 2009 (4A5BC184)
fffff880`06cff000 fffff880`06d0b000   ndistapi ndistapi.sys Mon Jul 13 20:10:00 2009 (4A5BCCD8)
fffff880`06d0b000 fffff880`06d3a000   ndiswan  ndiswan.sys  Mon Jul 13 20:10:11 2009 (4A5BCCE3)
fffff880`07555000 fffff880`0756a000   NDProxy  NDProxy.SYS  Mon Jul 13 20:10:05 2009 (4A5BCCDD)
fffff880`02d72000 fffff880`02d81000   netbios  netbios.sys  Mon Jul 13 20:09:26 2009 (4A5BCCB6)
fffff880`02cfe000 fffff880`02d43000   netbt    netbt.sys    Mon Jul 13 19:21:28 2009 (4A5BC178)
fffff880`01595000 fffff880`015f5000   NETIO    NETIO.SYS    Thu Apr 08 22:43:59 2010 (4BBE946F)
fffff880`09398000 fffff880`093ad000   NisDrvWFP NisDrvWFP.sys Tue Sep 14 20:20:25 2010 (4C901149)
fffff880`0198c000 fffff880`0199d000   Npfs     Npfs.SYS     Mon Jul 13 19:19:48 2009 (4A5BC114)
fffff880`02c51000 fffff880`02c5d000   nsiproxy nsiproxy.sys Mon Jul 13 19:21:02 2009 (4A5BC15E)
fffff800`02a0a000 fffff800`02fe6000   nt       ntkrnlmp.exe Sat Jun 19 00:16:41 2010 (4C1C44A9)
fffff880`01229000 fffff880`013cc000   Ntfs     Ntfs.sys     Mon Jul 13 19:20:47 2009 (4A5BC14F)
fffff880`01913000 fffff880`0191c000   Null     Null.SYS     Mon Jul 13 19:19:37 2009 (4A5BC109)
fffff880`06dcb000 fffff880`06de4000   nusb3hub nusb3hub.sys Thu Nov 18 20:34:24 2010 (4CE5D420)
fffff880`03dce000 fffff880`03dff000   nusb3xhc nusb3xhc.sys Thu Nov 18 20:34:25 2010 (4CE5D421)
fffff880`10acb000 fffff880`10acc180   nvBridge nvBridge.kmd Fri Jul 09 17:07:54 2010 (4C378FAA)
fffff880`0fe39000 fffff880`10acae00   nvlddmkm nvlddmkm.sys Fri Jul 09 17:15:58 2010 (4C37918E)
fffff880`02d4c000 fffff880`02d72000   pacer    pacer.sys    Mon Jul 13 20:09:41 2009 (4A5BCCC5)
fffff880`00e4a000 fffff880`00e5f000   partmgr  partmgr.sys  Mon Jul 13 19:19:58 2009 (4A5BC11E)
fffff880`00e0a000 fffff880`00e3d000   pci      pci.sys      Mon Jul 13 19:19:51 2009 (4A5BC117)
fffff880`00ed0000 fffff880`00ed7000   pciide   pciide.sys   Mon Jul 13 19:19:49 2009 (4A5BC115)
fffff880`00ed7000 fffff880`00ee7000   PCIIDEX  PCIIDEX.SYS  Mon Jul 13 19:19:48 2009 (4A5BC114)
fffff880`013e6000 fffff880`013f7000   pcw      pcw.sys      Mon Jul 13 19:19:27 2009 (4A5BC0FF)
fffff880`070ea000 fffff880`07190000   peauth   peauth.sys   Mon Jul 13 21:01:19 2009 (4A5BD8DF)
fffff880`08938000 fffff880`08975000   portcls  portcls.sys  Mon Jul 13 20:06:27 2009 (4A5BCC03)
fffff880`00d43000 fffff880`00d57000   PSHED    PSHED.dll    Mon Jul 13 21:32:23 2009 (4A5BE027)
fffff880`06cdb000 fffff880`06cff000   rasl2tp  rasl2tp.sys  Mon Jul 13 20:10:11 2009 (4A5BCCE3)
fffff880`06d3a000 fffff880`06d55000   raspppoe raspppoe.sys Mon Jul 13 20:10:17 2009 (4A5BCCE9)
fffff880`06d55000 fffff880`06d76000   raspptp  raspptp.sys  Mon Jul 13 20:10:18 2009 (4A5BCCEA)
fffff880`06d76000 fffff880`06d90000   rassstp  rassstp.sys  Mon Jul 13 20:10:25 2009 (4A5BCCF1)
fffff880`02c00000 fffff880`02c51000   rdbss    rdbss.sys    Mon Jul 13 19:24:09 2009 (4A5BC219)
fffff880`06d90000 fffff880`06d9b000   rdpbus   rdpbus.sys   Mon Jul 13 20:17:46 2009 (4A5BCEAA)
fffff880`01966000 fffff880`0196f000   RDPCDD   RDPCDD.sys   Mon Jul 13 20:16:34 2009 (4A5BCE62)
fffff880`093ad000 fffff880`093db000   rdpdr    rdpdr.sys    Mon Jul 13 20:18:02 2009 (4A5BCEBA)
fffff880`0196f000 fffff880`01978000   rdpencdd rdpencdd.sys Mon Jul 13 20:16:34 2009 (4A5BCE62)
fffff880`01978000 fffff880`01981000   rdprefmp rdprefmp.sys Mon Jul 13 20:16:35 2009 (4A5BCE63)
fffff880`09200000 fffff880`09238000   RDPWD    RDPWD.SYS    Mon Jul 13 20:16:47 2009 (4A5BCE6F)
fffff880`0104c000 fffff880`01086000   rdyboost rdyboost.sys Mon Jul 13 19:34:34 2009 (4A5BC48A)
fffff880`0757f000 fffff880`07597000   rspndr   rspndr.sys   Mon Jul 13 20:08:50 2009 (4A5BCC92)
fffff880`06c08000 fffff880`06c6e000   Rt64win7 Rt64win7.sys Fri Dec 24 02:30:25 2010 (4D144C11)
fffff880`086dc000 fffff880`08937d80   RTKVHD64 RTKVHD64.sys Fri Sep 03 04:02:27 2010 (4C80AB93)
fffff880`07190000 fffff880`0719b000   secdrv   secdrv.SYS   Wed Sep 13 09:18:38 2006 (4508052E)
fffff880`01485000 fffff880`0148d000   spldr    spldr.sys    Mon May 11 12:56:27 2009 (4A0858BB)
fffff880`092f9000 fffff880`0938f000   srv      srv.sys      Thu Aug 26 23:38:00 2010 (4C773318)
fffff880`09292000 fffff880`092f9000   srv2     srv2.sys     Thu Aug 26 23:37:46 2010 (4C77330A)
fffff880`0719b000 fffff880`071c8000   srvnet   srvnet.sys   Thu Aug 26 23:37:24 2010 (4C7732F4)
fffff880`06dea000 fffff880`06deb480   swenum   swenum.sys   Mon Jul 13 20:00:18 2009 (4A5BCA92)
fffff880`01601000 fffff880`017fe000   tcpip    tcpip.sys    Sun Jun 13 23:39:04 2010 (4C15A458)
fffff880`071c8000 fffff880`071da000   tcpipreg tcpipreg.sys Mon Jul 13 20:09:49 2009 (4A5BCCCD)
fffff880`019bb000 fffff880`019c8000   TDI      TDI.SYS      Mon Jul 13 19:21:18 2009 (4A5BC16E)
fffff880`093db000 fffff880`093e6000   tdtcp    tdtcp.sys    Mon Jul 13 20:16:32 2009 (4A5BCE60)
fffff880`0199d000 fffff880`019bb000   tdx      tdx.sys      Mon Jul 13 19:21:15 2009 (4A5BC16B)
fffff880`02ddf000 fffff880`02df3000   termdd   termdd.sys   Mon Jul 13 20:16:36 2009 (4A5BCE64)
fffff960`005e0000 fffff960`005ea000   TSDDD    TSDDD.dll    unavailable (00000000)
fffff880`093e6000 fffff880`093f5000   tssecsrv tssecsrv.sys Mon Jul 13 20:16:41 2009 (4A5BCE69)
fffff880`03d92000 fffff880`03db8000   tunnel   tunnel.sys   Mon Jul 13 20:09:37 2009 (4A5BCCC1)
fffff880`06db9000 fffff880`06dcb000   umbus    umbus.sys    Mon Jul 13 20:06:56 2009 (4A5BCC20)
fffff880`089df000 fffff880`089fc000   usbccgp  usbccgp.sys  Mon Jul 13 20:06:45 2009 (4A5BCC15)
fffff880`03c00000 fffff880`03c01f00   USBD     USBD.SYS     Mon Jul 13 20:06:23 2009 (4A5BCBFF)
fffff880`10bce000 fffff880`10bdf000   usbehci  usbehci.sys  Mon Jul 13 20:06:30 2009 (4A5BCC06)
fffff880`074fb000 fffff880`07555000   usbhub   usbhub.sys   Mon Jul 13 20:07:09 2009 (4A5BCC2D)
fffff880`03c48000 fffff880`03c9e000   USBPORT  USBPORT.SYS  Mon Jul 13 20:06:31 2009 (4A5BCC07)
fffff880`10bc1000 fffff880`10bce000   usbuhci  usbuhci.sys  Mon Jul 13 20:06:27 2009 (4A5BCC03)
fffff880`00e3d000 fffff880`00e4a000   vdrvroot vdrvroot.sys Mon Jul 13 20:01:31 2009 (4A5BCADB)
fffff880`01923000 fffff880`01931000   vga      vga.sys      Mon Jul 13 19:38:47 2009 (4A5BC587)
fffff880`01931000 fffff880`01956000   VIDEOPRT VIDEOPRT.SYS Mon Jul 13 19:38:51 2009 (4A5BC58B)
fffff880`01475000 fffff880`01485000   vmstorfl vmstorfl.sys Mon Jul 13 19:42:54 2009 (4A5BC67E)
fffff880`00e5f000 fffff880`00e74000   volmgr   volmgr.sys   Mon Jul 13 19:19:57 2009 (4A5BC11D)
fffff880`00e74000 fffff880`00ed0000   volmgrx  volmgrx.sys  Mon Jul 13 19:20:33 2009 (4A5BC141)
fffff880`01000000 fffff880`0104c000   volsnap  volsnap.sys  Mon Jul 13 19:20:08 2009 (4A5BC128)
fffff880`02dc4000 fffff880`02ddf000   wanarp   wanarp.sys   Mon Jul 13 20:10:21 2009 (4A5BCCED)
fffff880`01956000 fffff880`01966000   watchdog watchdog.sys Mon Jul 13 19:37:35 2009 (4A5BC53F)
fffff880`00eea000 fffff880`00f8e000   Wdf01000 Wdf01000.sys Mon Jul 13 19:22:07 2009 (4A5BC19F)
fffff880`00f8e000 fffff880`00f9d000   WDFLDR   WDFLDR.SYS   Mon Jul 13 19:19:54 2009 (4A5BC11A)
fffff880`02d43000 fffff880`02d4c000   wfplwf   wfplwf.sys   Mon Jul 13 20:09:26 2009 (4A5BCCB6)
fffff960`000a0000 fffff960`003b0000   win32k   win32k.sys   Tue Oct 19 23:08:46 2010 (4CBE5D3E)
fffff880`06cac000 fffff880`06cb5000   wmiacpi  wmiacpi.sys  Mon Jul 13 19:31:02 2009 (4A5BC3B6)
fffff880`00ff4000 fffff880`00ffd000   WMILIB   WMILIB.SYS   Mon Jul 13 19:19:51 2009 (4A5BC117)
fffff880`0867c000 fffff880`0869d000   WudfPf   WudfPf.sys   Mon Jul 13 20:05:37 2009 (4A5BCBD1)
fffff880`0869d000 fffff880`086ce000   WUDFRd   WUDFRd.sys   Mon Jul 13 20:06:06 2009 (4A5BCBEE)

Unloaded modules:
fffff880`01882000 fffff880`01890000   crashdmp.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffff880`01890000 fffff880`0189c000   dump_ataport
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffff880`0189c000 fffff880`018a5000   dump_atapi.s
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffff880`018a5000 fffff880`018b8000   dump_dumpfve
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffff880`06db9000 fffff880`06dea000   WUDFRd.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffff880`06db9000 fffff880`06dea000   WUDFRd.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000

eim · Feb 4, 2011

Uninstalled DeamonTools and Enabled Driver Verifier, havent noticed anything yet.

Tnx for having a look, i think i will delete all logs and test it for a while. Perhaps i'll return with a new minidump

CarlTR6 · Feb 4, 2011

After you run Verifier for about 36 hours, you can turn it off. I hope you'll return WITHOUT a mini dump to say your system is running smoothly!

eim · Feb 5, 2011

i'm back...

Oh no!
Booted up the computer, it gave me a BSOD for a few sec...
I made a new minidump, is there any useful information?

All help is much appriciated

(System Specs - See below)

CarlTR6 · Feb 5, 2011

This is a Driver Verifier enabled dump and it blames ntfs.sys which is the Windows file system driver and unlikely to be the real cause. You can turn off Driver Verifier for now. Because ntfs.sys was blamed. I suggest you check your file system with CheckDisk -

Run CHKDSK /R /F from an elevated (Run as adminstrator) Command Prompt. Please do this for each hard drive on your system.
When it tells you it can't do it right now - and asks you if you'd like to do it at the next reboot - answer Y (for Yes) and press Enter. Then reboot and let the test run. It may take a while for it to run, but keep an occasional eye on it to see if it generates any errors. See "CHKDSK LogFile" below in order to check the results of the test.

Elevated Command Prompt:
Go to Start and type in "cmd.exe" (without the quotes)
At the top of the Search Box, right click on Cmd.exe and select "Run as administrator"

CHKDSK LogFile:
Go to Start and type in "eventvwr.msc" (without the quotes) and press Enter
Expand the Windows logs heading, then select the Application log file entry.
Double click on the Source column header.
Scroll down the list until you find the Chkdsk entry (wininit for Windows 7) (winlogon for XP).

Copy/paste the results into your next post.

Code:

Windows 7 Kernel Version 7600 MP (8 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 7600.16617.amd64fre.win7_gdr.100618-1621
Machine Name:
Kernel base = 0xfffff800`02a67000 PsLoadedModuleList = 0xfffff800`02ca4e50
Debug session time: Sat Feb  5 03:52:37.696 2011 (GMT-5)
System Uptime: 0 days 0:00:15.788
Loading Kernel Symbols
...............................................................
......................
Loading User Symbols
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck 24, {1904fb, fffff880033609a8, fffff88003360210, fffff80002af72b3}

Probably caused by : Ntfs.sys ( Ntfs!NtfsNonCachedIo+23f )

Followup: MachineOwner
---------

7: kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

NTFS_FILE_SYSTEM (24)
    If you see NtfsExceptionFilter on the stack then the 2nd and 3rd
    parameters are the exception record and context record. Do a .cxr
    on the 3rd parameter and then kb to obtain a more informative stack
    trace.
Arguments:
Arg1: 00000000001904fb
Arg2: fffff880033609a8
Arg3: fffff88003360210
Arg4: fffff80002af72b3

Debugging Details:
------------------


EXCEPTION_RECORD:  fffff880033609a8 -- (.exr 0xfffff880033609a8)
ExceptionAddress: fffff80002af72b3 (nt!IopCompleteRequest+0x0000000000000ae3)
   ExceptionCode: c0000005 (Access violation)
  ExceptionFlags: 00000000
NumberParameters: 2
   Parameter[0]: 0000000000000000
   Parameter[1]: ffffffffffffffff
Attempt to read from address ffffffffffffffff

CONTEXT:  fffff88003360210 -- (.cxr 0xfffff88003360210)
rax=fffff88003361f80 rbx=fffff980034b0ee0 rcx=0000bcfa00520050
rdx=0000bcfa00520050 rsi=0000000000000000 rdi=0000000000000000
rip=fffff80002af72b3 rsp=fffff88003360be0 rbp=0000000000000000
 r8=fffff88003360ce8  r9=fffff88003360ce0 r10=0000000000000002
r11=fffff80002af67d0 r12=fffff88003361f78 r13=0000000000000000
r14=fffffa8004f26680 r15=fffff8800316a180
iopl=0         nv up ei pl nz na pe cy
cs=0010  ss=0018  ds=002b  es=002b  fs=0053  gs=002b             efl=00010203
nt!IopCompleteRequest+0xae3:
fffff800`02af72b3 488b09          mov     rcx,qword ptr [rcx] ds:002b:0000bcfa`00520050=????????????????
Resetting default scope

CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  VERIFIER_ENABLED_VISTA_MINIDUMP

PROCESS_NAME:  System

CURRENT_IRQL:  2

ERROR_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s.

EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s.

EXCEPTION_PARAMETER1:  0000000000000000

EXCEPTION_PARAMETER2:  ffffffffffffffff

READ_ADDRESS: GetPointerFromAddress: unable to read from fffff80002d0f0e0
 ffffffffffffffff 

FOLLOWUP_IP: 
Ntfs!NtfsNonCachedIo+23f
fffff880`0122405f 498b4d78        mov     rcx,qword ptr [r13+78h]

FAULTING_IP: 
nt!IopCompleteRequest+ae3
fffff800`02af72b3 488b09          mov     rcx,qword ptr [rcx]

BUGCHECK_STR:  0x24

IRP_ADDRESS:  ffffffffffffff89

LAST_CONTROL_TRANSFER:  from fffff80002ab40c7 to fffff80002af72b3

STACK_TEXT:  
fffff880`03360be0 fffff800`02ab40c7 : 00000000`00000001 00000000`00000000 00000000`00000000 00000000`00000000 : nt!IopCompleteRequest+0xae3
fffff880`03360cb0 fffff800`02adeb9d : fffffa80`04f26680 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiDeliverApc+0x1d7
fffff880`03360d30 fffff800`02ae0cff : fffff880`03361200 fffffa80`06ed0040 00000000`00000000 fffff880`03360f60 : nt!KiCommitThreadWait+0x3dd
fffff880`03360dc0 fffff880`0122405f : fffffa80`06f61500 00000000`00000000 fffff8a0`04046500 fffff800`02af3d00 : nt!KeWaitForSingleObject+0x19f
fffff880`03360e60 fffff880`01227526 : fffff880`03361200 fffff980`034d8c60 fffff8a0`040465a0 fffff8a0`04046470 : Ntfs!NtfsNonCachedIo+0x23f
fffff880`03361030 fffff880`01229f78 : fffff880`03361200 fffff980`034d8c60 fffff880`03361301 fffffa80`06f62001 : Ntfs!NtfsCommonRead+0x7a6
fffff880`033611d0 fffff800`02f7dc16 : fffff980`034d8c60 fffff980`034d8c60 fffffa80`06f62030 fffffa80`0734d8f0 : Ntfs!NtfsFsdRead+0x1b8
fffff880`033613d0 fffff880`0104b23f : fffff980`034d8fb8 fffff880`03361480 fffffa80`07276870 fffffa80`0734d8f0 : nt!IovCallDriver+0x566
fffff880`03361430 fffff880`010496df : fffffa80`06d55de0 fffffa80`06d55de0 fffffa80`06d55d00 fffff980`034d8c60 : fltmgr!FltpLegacyProcessingAfterPreCallbacksCompleted+0x24f
fffff880`033614c0 fffff800`02f7dc16 : fffff980`034d8c60 00000000`00000002 fffffa80`074ab070 fffffa80`05148c98 : fltmgr!FltpDispatch+0xcf
fffff880`03361520 fffff800`02ac91f2 : fffff980`034d8c80 00000000`00000043 fffff980`034d8c60 fffffa80`0734d9c0 : nt!IovCallDriver+0x566
fffff880`03361580 fffff800`02d9afb0 : fffffa80`074ab000 fffffa80`074ab000 00000000`00000001 00000000`00184be3 : nt!IoPageRead+0x252
fffff880`03361610 fffff800`02dd2c75 : fffffa80`074ab070 00000000`00000000 00000000`00000022 fffff880`033618c0 : nt!MiCreateImageFileMap+0x170
fffff880`03361840 fffff800`02dc8013 : fffff880`03361aa0 00000000`00000000 fffff880`03361d58 fffff880`03361a98 : nt!MmCreateSection+0x7a9
fffff880`03361a50 fffff800`02ad6993 : fffffa80`04f26680 fffff880`03361cf8 fffff880`03361ae8 00000000`00000000 : nt!NtCreateSection+0x162
fffff880`03361ad0 fffff800`02ad2f30 : fffff800`02eb08b6 fffffa80`04f26680 fffff880`03361d80 00000000`00000004 : nt!KiSystemServiceCopyEnd+0x13
fffff880`03361cd8 fffff800`02eb08b6 : fffffa80`04f26680 fffff880`03361d80 00000000`00000004 00000000`00000030 : nt!KiServiceLinkage
fffff880`03361ce0 fffff800`02eb0c7c : ffffffff`80000210 00000000`00100000 fffff880`03361e00 fffff800`02ad593d : nt!MmCheckSystemImage+0x96
fffff880`03361e10 fffff800`02eb0e97 : ffffffff`80000210 00001f80`00000001 fffff8a0`04046cc0 00000000`00000000 : nt!MiCreateSectionForDriver+0xcc
fffff880`03361ec0 fffff800`02ebc73a : 00000000`00000000 fffff880`03362080 fffffa80`04f26680 00000000`00000000 : nt!MiObtainSectionForDriver+0xd7
fffff880`03361f20 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!MmLoadSystemImage+0x23a


SYMBOL_STACK_INDEX:  4

SYMBOL_NAME:  Ntfs!NtfsNonCachedIo+23f

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: Ntfs

IMAGE_NAME:  Ntfs.sys

DEBUG_FLR_IMAGE_TIMESTAMP:  4a5bc14f

STACK_COMMAND:  .cxr 0xfffff88003360210 ; kb

FAILURE_BUCKET_ID:  X64_0x24_VRF_Ntfs!NtfsNonCachedIo+23f

BUCKET_ID:  X64_0x24_VRF_Ntfs!NtfsNonCachedIo+23f

Followup: MachineOwner
---------

eim · Feb 6, 2011

Here is the CHKDSK LogFiles. In swedish...

(was about to run it in google translate, but i gues that would mess it up even more)
Is there any usful information?

Code:

Kontrollerar filsystemet på C:
Filsystemet är av typen NTFS.
En diskkontroll har schemalagts.
Disken kommer nu att kontrolleras. 
CHKDSK verifierar filer (steg 1 av 5)...
119552 filposter har behandlats. Filverifieringen är klar.
183 stora filposter har behandlats. 0 skadade filposter har behandlats. 2 EA-poster har behandlats. 71 referensposter har behandlats. CHKDSK verifierar index (steg 2 av 5)...
Det går inte att hitta filnamnsattributet för indexposten MINABI~
för indexet $I30 med den överordnade filen 0x207 i filen 0x242.
Tar bort indexposten MINABI~ i indexet $I30 i filen 519.
164958 indexposter har behandlats. Indexverifieringen är klar.
CHKDSK läser oindexerade filer för återanslutning till den ursprungliga katalogen.
1 oindexerade filer har genomsökts. Återställer den överblivna filen MINABI~1 (578) till katalogfilen 519.
0 oindexerade filer har återställts. CHKDSK verifierar säkerhetsbeskrivare (steg 3 av 5)...
119552 fil-SD/SID-poster har behandlats. Rensar upp 303 oanvända indexposter från indexet $SII i filen 0x9.
Rensar upp 303 oanvända indexposter från indexet $SDH i filen 0x9.
Rensar upp 303 oanvända säkerhetsbeskrivare.
Verifieringen av säkerhetsbeskrivare är klar.
22704 datafiler har behandlats. CHKDSK verifierar USN-journalen...
37511560 USN-byte har behandlats. Verifieringen av USN-journalen är klar.
CHKDSK verifierar fildata (steg 4 av 5)...
119536 filer har behandlats. Verifieringen av filinformationen är klar.
CHKDSK verifierar ledigt diskutrymme (steg 5 av 5)...
49933708 lediga kluster har bearbetats. Verifieringen av ledigt diskutrymme är klar.
Korrigeringar har gjorts i filsystemet.
244089855 kB diskutrymme totalt.
44068232 kB i 91878 filer.
56776 kB i 22705 index.
0 kB i skadade sektorer.
230011 kB används av operativsystemet.
65536 kB hårddisksutrymme används av loggfilen.
199734836 kB ledigt utrymme.
4096 byte i varje allokeringsenhet.
61022463 allokeringsenheter finns totalt på disken.
49933709 allokeringsenheter är tillgängliga på disken.
Intern information:
00 d3 01 00 a2 bf 01 00 1d 62 03 00 00 00 00 00 .........b......
f7 00 00 00 47 00 00 00 00 00 00 00 00 00 00 00 ....G...........
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
Kontrollen av disken har slutförts.
Vänta medan datorn startas om.

Code:

Chkdsk kördes i läs- och skrivläge. 
Kontrollerar filsystemet på D:
Filsystemet är av typen NTFS.
Det går inte att låsa aktuell enhet.
Det går inte att köra CHKDSK eftersom volymen används av en annan process.
Kommandot CHKDSK kan köras om volymen demonteras först.
ALLA ÖPPNA REFERENSER TILL VOLYMEN BLIR OGILTIGA.
Vill du tvinga fram en demontering av den här volymen? (J/N) Volymen är demonterad. Alla öppna referenser till volymen är nu ogiltiga.
Volymetiketten är Ny volym.
CHKDSK verifierar filer (steg 1 av 5)...
246272 filposter har behandlats. Filverifieringen är klar.
2 stora filposter har behandlats. 0 skadade filposter har behandlats. 0 EA-poster har behandlats. 0 referensposter har behandlats. CHKDSK verifierar index (steg 2 av 5)...
251406 indexposter har behandlats. Indexverifieringen är klar.
0 oindexerade filer har genomsökts. 0 oindexerade filer har återställts. CHKDSK verifierar säkerhetsbeskrivare (steg 3 av 5)...
246272 fil-SD/SID-poster har behandlats. Rensar upp 23 oanvända indexposter från indexet $SII i filen 0x9.
Rensar upp 23 oanvända indexposter från indexet $SDH i filen 0x9.
Rensar upp 23 oanvända säkerhetsbeskrivare.
Verifieringen av säkerhetsbeskrivare är klar.
2567 datafiler har behandlats. CHKDSK verifierar fildata (steg 4 av 5)...
246256 filer har behandlats. Verifieringen av filinformationen är klar.
CHKDSK verifierar ledigt diskutrymme (steg 5 av 5)...
105503454 lediga kluster har bearbetats. Verifieringen av ledigt diskutrymme är klar.
Filsystemet har kontrollerats. Inga problem påträffades.
488383487 kB diskutrymme totalt.
65970016 kB i 165016 filer.
72492 kB i 2569 index.
0 kB i skadade sektorer.
327159 kB används av operativsystemet.
65536 kB hårddisksutrymme används av loggfilen.
422013820 kB ledigt utrymme.
4096 byte i varje allokeringsenhet.
122095871 allokeringsenheter finns totalt på disken.
105503455 allokeringsenheter är tillgängliga på disken.

CarlTR6 · Feb 6, 2011

I believe it shows 0 bytes in bad clusters or sectors. That is what I was looking for. It looks like it did a little cleaning up of your file system. It looks like your file system is in good shape.

eim · Feb 7, 2011

This aint fun... Today when i booted upp the computer, it didnt work out the way i hoped it to...
1. Aero theme didnt start - ok i can live with that.
2. Computer performance is really bad... slow like a 286 again - what is this now...
3. Explorer.exe crashes, constantly... i cant open anything, APPCRACH. - oh no...
4. System hangs, restart and... BSOD
5. Rebooted the computer, and now it looks allright again....

Latest Logfiles attached - Is there a chance to find the cause?

(i bought this hardware 4 months ago and have spent so much time trying to get it working, after 2 months the reseller gave me a new motherboard... but that did not change a thing. I reinstalled many times, changed harddrives, changed PSU, dont know what to do now... its annoying, for real

)

Could it be win7 64-bit that is the problem? (is it worth a try with win7 -32bit?)

CarlTR6 · Feb 7, 2011

Your latest dump blames ntkrnlmp.exe, a Windows system core file which is most likely not the real cause.

Bugcheck 18, REFERENCE_BY_POINTER. Usual causes: Device driver, kernel, hardware. This indicates that the reference count of an object is illegal for the current state of the object

I realize this is probably not the problem; but try uninstalling DU Meter just in case it is causing conflict. Through Google, I found there are some problems with it. That is the only device driver I can find on your system that it is out of the ordinary. All of your drivers appear to be up to date. You can always reinstall if removing it does not solve your problem. As an alternative, you can rename the driver. Create a restore and using Windows Explorer, navigate to C:\Program Files (x86)\DU Meter; find DUMetr64.sys; and rename it from .sys to .bak. Reboot and the driver should not load. This will break the DU Meter program; but it is easily reversible.

If this does not fix the problem, it is time to test hardware. Your next step will be to test your RAM with Memtest86. Follow the instructions in this tutorial: http://www.sevenforums.com/tutorials/105647-ram-test-memtest86.html. Run Memtest from a cold boot after your computer has been off for an hour or so. Let it run for seven passes or more. This will take 6-8 hours. If you see any errors, you can stop the test. Post back with your results.

If, and only if, Memtest shows no errors, test your CPU and your RAM with Prime95 carefully following the instructions in this tutorial: http://www.sevenforums.com/tutorials/100352-cpu-stress-test-prime95.html. Run 3 separate tests, one on each of the settings (Blend, Small FFTs, Large FFTs).

Code:

Windows 7 Kernel Version 7600 MP (8 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 7600.16617.amd64fre.win7_gdr.100618-1621
Machine Name:
Kernel base = 0xfffff800`02a5f000 PsLoadedModuleList = 0xfffff800`02c9ce50
Debug session time: Sun Feb  6 16:19:00.945 2011 (GMT-5)
System Uptime: 0 days 0:21:32.038
Loading Kernel Symbols
...............................................................
................................................................
.........................
Loading User Symbols
Loading unloaded module list
.........
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck 18, {fffffa8004e83d00, fffffa8006577b10, 1, fffff8a00b206c8b}

Probably caused by : ntkrnlmp.exe ( nt! ?? ::FNODOBFM::`string'+463ba )

Followup: MachineOwner
---------

2: kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

REFERENCE_BY_POINTER (18)
Arguments:
Arg1: fffffa8004e83d00, Object type of the object whose reference count is being lowered
Arg2: fffffa8006577b10, Object whose reference count is being lowered
Arg3: 0000000000000001, Reserved
Arg4: fffff8a00b206c8b, Reserved
    The reference count of an object is illegal for the current state of the object.
    Each time a driver uses a pointer to an object the driver calls a kernel routine
    to increment the reference count of the object. When the driver is done with the
    pointer the driver calls another kernel routine to decrement the reference count.
    Drivers must match calls to the increment and decrement routines. This bugcheck
    can occur because an object's reference count goes to zero while there are still
    open handles to the object, in which case the fourth parameter indicates the number
    of opened handles. It may also occur when the object’s reference count drops below zero
    whether or not there are open handles to the object, and in that case the fourth parameter
    contains the actual value of the pointer references count.

Debugging Details:
------------------


CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT

BUGCHECK_STR:  0x18

PROCESS_NAME:  TrustedInstall

CURRENT_IRQL:  0

LAST_CONTROL_TRANSFER:  from fffff80002a66f85 to fffff80002acf740

STACK_TEXT:  
fffff880`099ac788 fffff800`02a66f85 : 00000000`00000018 fffffa80`04e83d00 fffffa80`06577b10 00000000`00000001 : nt!KeBugCheckEx
fffff880`099ac790 fffff800`02de5514 : fffffa80`05684b30 00000000`00000000 fffffa80`068b1380 00000000`00000000 : nt! ?? ::FNODOBFM::`string'+0x463ba
fffff880`099ac7f0 fffff800`02de5414 : 00000000`00000930 fffffa80`05684b30 fffff8a0`00001a70 00000000`00000930 : nt!ObpCloseHandleTableEntry+0xc4
fffff880`099ac880 fffff800`02ace993 : fffffa80`068b1380 fffff880`099ac950 fffff8a0`096bbb00 fffffa80`05d5f040 : nt!ObpCloseHandle+0x94
fffff880`099ac8d0 fffff800`02acaf30 : fffff800`02d5b170 00000000`00000000 fffff8a0`0a02b8a0 fffff880`099acca0 : nt!KiSystemServiceCopyEnd+0x13
fffff880`099aca68 fffff800`02d5b170 : 00000000`00000000 fffff8a0`0a02b8a0 fffff880`099acca0 fffff8a0`096bbb00 : nt!KiServiceLinkage
fffff880`099aca70 fffff800`02ace993 : fffffa80`068b1380 000007fe`fe313110 00000000`00000001 00000000`0029ad00 : nt!NtUnloadKey2+0x4c3
fffff880`099acc20 00000000`776615da : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceCopyEnd+0x13
00000000`00e7fcf8 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x776615da


STACK_COMMAND:  kb

FOLLOWUP_IP: 
nt! ?? ::FNODOBFM::`string'+463ba
fffff800`02a66f85 cc              int     3

SYMBOL_STACK_INDEX:  1

SYMBOL_NAME:  nt! ?? ::FNODOBFM::`string'+463ba

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: nt

IMAGE_NAME:  ntkrnlmp.exe

DEBUG_FLR_IMAGE_TIMESTAMP:  4c1c44a9

FAILURE_BUCKET_ID:  X64_0x18_nt!_??_::FNODOBFM::_string_+463ba

BUCKET_ID:  X64_0x18_nt!_??_::FNODOBFM::_string_+463ba

Followup: MachineOwner
---------

2: kd> lmtsmn
start             end                 module name
fffff880`10b8a000 fffff880`10bc8000   1394ohci 1394ohci.sys Mon Jul 13 20:07:12 2009 (4A5BCC30)
fffff880`00f61000 fffff880`00fb8000   ACPI     ACPI.sys     Mon Jul 13 19:19:34 2009 (4A5BC106)
fffff880`02c73000 fffff880`02cfd000   afd      afd.sys      Mon Jul 13 19:21:40 2009 (4A5BC184)
fffff880`10bc8000 fffff880`10bde000   AgileVpn AgileVpn.sys Mon Jul 13 20:10:24 2009 (4A5BCCF0)
fffff880`00c4d000 fffff880`00c58000   amdxata  amdxata.sys  Tue May 19 13:56:59 2009 (4A12F2EB)
fffff880`06fb6000 fffff880`06fc1000   asyncmac asyncmac.sys Mon Jul 13 20:10:13 2009 (4A5BCCE5)
fffff880`00c1a000 fffff880`00c23000   atapi    atapi.sys    Mon Jul 13 19:19:47 2009 (4A5BC113)
fffff880`00c23000 fffff880`00c4d000   ataport  ataport.SYS  Mon Jul 13 19:19:52 2009 (4A5BC118)
fffff960`008a0000 fffff960`00901000   ATMFD    ATMFD.DLL    Tue Oct 19 23:05:45 2010 (4CBE5C89)
fffff880`01952000 fffff880`01959000   Beep     Beep.SYS     Mon Jul 13 20:00:13 2009 (4A5BCA8D)
fffff880`02c44000 fffff880`02c55000   blbdrive blbdrive.sys Mon Jul 13 19:35:59 2009 (4A5BC4DF)
fffff880`0697d000 fffff880`0699b000   bowser   bowser.sys   Mon Jul 13 19:23:50 2009 (4A5BC206)
fffff960`00680000 fffff960`006a7000   cdd      cdd.dll      unavailable (00000000)
fffff880`018ee000 fffff880`01918000   cdrom    cdrom.sys    Mon Jul 13 19:19:54 2009 (4A5BC11A)
fffff880`00d33000 fffff880`00df3000   CI       CI.dll       Mon Jul 13 21:32:13 2009 (4A5BE01D)
fffff880`01888000 fffff880`018b8000   CLASSPNP CLASSPNP.SYS Mon Jul 13 19:19:58 2009 (4A5BC11E)
fffff880`00cd5000 fffff880`00d33000   CLFS     CLFS.SYS     Mon Jul 13 19:19:57 2009 (4A5BC11D)
fffff880`010c0000 fffff880`01133000   cng      cng.sys      Mon Jul 13 19:49:40 2009 (4A5BC814)
fffff880`043e4000 fffff880`043f4000   CompositeBus CompositeBus.sys Mon Jul 13 20:00:33 2009 (4A5BCAA1)
fffff880`06871000 fffff880`0687a000   cpuz135_x64 cpuz135_x64.sys Tue Nov 09 08:33:36 2010 (4CD94DB0)
fffff880`05f39000 fffff880`05f47000   crashdmp crashdmp.sys Mon Jul 13 20:01:01 2009 (4A5BCABD)
fffff880`01800000 fffff880`01883000   csc      csc.sys      Mon Jul 13 19:24:26 2009 (4A5BC22A)
fffff880`02c26000 fffff880`02c44000   dfsc     dfsc.sys     Mon Jul 13 19:23:44 2009 (4A5BC200)
fffff880`02c17000 fffff880`02c26000   discache discache.sys Mon Jul 13 19:37:18 2009 (4A5BC52E)
fffff880`013e4000 fffff880`013fa000   disk     disk.sys     Mon Jul 13 19:19:57 2009 (4A5BC11D)
fffff880`05f05000 fffff880`05f27000   drmk     drmk.sys     Mon Jul 13 21:01:25 2009 (4A5BD8E5)
fffff880`06ebc000 fffff880`06ec5000   DUMETR64 DUMETR64.SYS Thu Aug 19 15:13:29 2010 (4C6D8259)
fffff880`05f53000 fffff880`05f5c000   dump_atapi dump_atapi.sys Mon Jul 13 19:19:47 2009 (4A5BC113)
fffff880`05f47000 fffff880`05f53000   dump_dumpata dump_dumpata.sys Mon Jul 13 19:19:47 2009 (4A5BC113)
fffff880`05f5c000 fffff880`05f6f000   dump_dumpfve dump_dumpfve.sys Mon Jul 13 19:21:51 2009 (4A5BC18F)
fffff880`05f2d000 fffff880`05f39000   Dxapi    Dxapi.sys    Mon Jul 13 19:38:28 2009 (4A5BC574)
fffff880`04270000 fffff880`04364000   dxgkrnl  dxgkrnl.sys  Thu Oct 01 21:00:14 2009 (4AC5509E)
fffff880`04364000 fffff880`043aa000   dxgmms1  dxgmms1.sys  Mon Jul 13 19:38:32 2009 (4A5BC578)
fffff880`0104e000 fffff880`01062000   fileinfo fileinfo.sys Mon Jul 13 19:34:25 2009 (4A5BC481)
fffff880`01002000 fffff880`0104e000   fltmgr   fltmgr.sys   Mon Jul 13 19:19:59 2009 (4A5BC11F)
fffff880`013da000 fffff880`013e4000   Fs_Rec   Fs_Rec.sys   Mon Jul 13 19:19:45 2009 (4A5BC111)
fffff880`011b9000 fffff880`011f3000   fvevol   fvevol.sys   Fri Sep 25 22:34:26 2009 (4ABD7DB2)
fffff880`01581000 fffff880`015cb000   fwpkclnt fwpkclnt.sys Mon Jul 13 19:21:08 2009 (4A5BC164)
fffff800`02a16000 fffff800`02a5f000   hal      hal.dll      Mon Jul 13 21:27:36 2009 (4A5BDF08)
fffff880`043b7000 fffff880`043db000   HDAudBus HDAudBus.sys Mon Jul 13 20:06:13 2009 (4A5BCBF5)
fffff880`05fa8000 fffff880`05fc1000   HIDCLASS HIDCLASS.SYS Mon Jul 13 20:06:21 2009 (4A5BCBFD)
fffff880`05fc1000 fffff880`05fc9080   HIDPARSE HIDPARSE.SYS Mon Jul 13 20:06:17 2009 (4A5BCBF9)
fffff880`05f9a000 fffff880`05fa8000   hidusb   hidusb.sys   Mon Jul 13 20:06:22 2009 (4A5BCBFE)
fffff880`068b5000 fffff880`0697d000   HTTP     HTTP.sys     Mon Jul 13 19:22:16 2009 (4A5BC1A8)
fffff880`015f5000 fffff880`015fe000   hwpolicy hwpolicy.sys Mon Jul 13 19:19:22 2009 (4A5BC0FA)
fffff880`04118000 fffff880`0412e000   intelppm intelppm.sys Mon Jul 13 19:19:25 2009 (4A5BC0FD)
fffff880`0416c000 fffff880`0417b000   kbdclass kbdclass.sys Mon Jul 13 19:19:50 2009 (4A5BC116)
fffff880`05fd7000 fffff880`05fe5000   kbdhid   kbdhid.sys   Mon Jul 13 20:00:20 2009 (4A5BCA94)
fffff800`00bb9000 fffff800`00bc3000   kdcom    kdcom.dll    Mon Jul 13 21:31:07 2009 (4A5BDFDB)
fffff880`04000000 fffff880`04043000   ks       ks.sys       Wed Mar 03 23:32:25 2010 (4B8F37D9)
fffff880`013af000 fffff880`013c9000   ksecdd   ksecdd.sys   Mon Jul 13 19:20:54 2009 (4A5BC156)
fffff880`01556000 fffff880`01581000   ksecpkg  ksecpkg.sys  Fri Dec 11 01:03:32 2009 (4B21E0B4)
fffff880`05f27000 fffff880`05f2c200   ksthunk  ksthunk.sys  Mon Jul 13 20:00:19 2009 (4A5BCA93)
fffff880`04269000 fffff880`0426cd80   LGBusEnum LGBusEnum.sys Mon Nov 23 20:36:48 2009 (4B0B38B0)
fffff880`06fc1000 fffff880`06fc3480   LGVirHid LGVirHid.sys Mon Nov 23 20:36:48 2009 (4B0B38B0)
fffff880`05c44000 fffff880`05c59000   lltdio   lltdio.sys   Mon Jul 13 20:08:50 2009 (4A5BCC92)
fffff880`05c00000 fffff880`05c23000   luafv    luafv.sys    Mon Jul 13 19:26:13 2009 (4A5BC295)
fffff880`00c7d000 fffff880`00cc1000   mcupdate_GenuineIntel mcupdate_GenuineIntel.dll Mon Jul 13 21:29:10 2009 (4A5BDF66)
fffff880`05f6f000 fffff880`05f7d000   monitor  monitor.sys  Mon Jul 13 19:38:52 2009 (4A5BC58C)
fffff880`0417b000 fffff880`0418a000   mouclass mouclass.sys Mon Jul 13 19:19:50 2009 (4A5BC116)
fffff880`05fca000 fffff880`05fd7000   mouhid   mouhid.sys   Mon Jul 13 20:00:20 2009 (4A5BCA94)
fffff880`00c00000 fffff880`00c1a000   mountmgr mountmgr.sys Mon Jul 13 19:19:54 2009 (4A5BC11A)
fffff880`01918000 fffff880`01949000   MpFilter MpFilter.sys Tue Sep 14 20:19:28 2010 (4C901110)
fffff880`06d4f000 fffff880`06d5f000   MpNWMon  MpNWMon.sys  Tue Sep 14 20:19:30 2010 (4C901112)
fffff880`0699b000 fffff880`069b3000   mpsdrv   mpsdrv.sys   Mon Jul 13 20:08:25 2009 (4A5BCC79)
fffff880`069b3000 fffff880`069e0000   mrxsmb   mrxsmb.sys   Sat Feb 27 02:52:19 2010 (4B88CF33)
fffff880`06800000 fffff880`0684e000   mrxsmb10 mrxsmb10.sys Sat Feb 27 02:52:28 2010 (4B88CF3C)
fffff880`0684e000 fffff880`06871000   mrxsmb20 mrxsmb20.sys Sat Feb 27 02:52:26 2010 (4B88CF3A)
fffff880`019b7000 fffff880`019c2000   Msfs     Msfs.SYS     Mon Jul 13 19:19:47 2009 (4A5BC113)
fffff880`00fc1000 fffff880`00fcb000   msisadrv msisadrv.sys Mon Jul 13 19:19:26 2009 (4A5BC0FE)
fffff880`01062000 fffff880`010c0000   msrpc    msrpc.sys    Mon Jul 13 19:21:32 2009 (4A5BC17C)
fffff880`02c0c000 fffff880`02c17000   mssmbios mssmbios.sys Mon Jul 13 19:31:10 2009 (4A5BC3BE)
fffff880`015e3000 fffff880`015f5000   mup      mup.sys      Mon Jul 13 19:23:45 2009 (4A5BC201)
fffff880`01404000 fffff880`014f6000   ndis     ndis.sys     Mon Jul 13 19:21:40 2009 (4A5BC184)
fffff880`043f4000 fffff880`04400000   ndistapi ndistapi.sys Mon Jul 13 20:10:00 2009 (4A5BCCD8)
fffff880`0fe24000 fffff880`0fe53000   ndiswan  ndiswan.sys  Mon Jul 13 20:10:11 2009 (4A5BCCE3)
fffff880`040c8000 fffff880`040dd000   NDProxy  NDProxy.SYS  Mon Jul 13 20:10:05 2009 (4A5BCCDD)
fffff880`02d71000 fffff880`02d80000   netbios  netbios.sys  Mon Jul 13 20:09:26 2009 (4A5BCCB6)
fffff880`02cfd000 fffff880`02d42000   netbt    netbt.sys    Mon Jul 13 19:21:28 2009 (4A5BC178)
fffff880`014f6000 fffff880`01556000   NETIO    NETIO.SYS    Thu Apr 08 22:43:59 2010 (4BBE946F)
fffff880`06ea7000 fffff880`06ebc000   NisDrvWFP NisDrvWFP.sys Tue Sep 14 20:20:25 2010 (4C901149)
fffff880`019c2000 fffff880`019d3000   Npfs     Npfs.SYS     Mon Jul 13 19:19:48 2009 (4A5BC114)
fffff880`02c00000 fffff880`02c0c000   nsiproxy nsiproxy.sys Mon Jul 13 19:21:02 2009 (4A5BC15E)
fffff800`02a5f000 fffff800`0303b000   nt       ntkrnlmp.exe Sat Jun 19 00:16:41 2010 (4C1C44A9)
fffff880`0120c000 fffff880`013af000   Ntfs     Ntfs.sys     Mon Jul 13 19:20:47 2009 (4A5BC14F)
fffff880`01949000 fffff880`01952000   Null     Null.SYS     Mon Jul 13 19:19:37 2009 (4A5BC109)
fffff880`04055000 fffff880`0406e000   nusb3hub nusb3hub.sys Thu Nov 18 20:34:24 2010 (4CE5D420)
fffff880`0412e000 fffff880`0415f000   nusb3xhc nusb3xhc.sys Thu Nov 18 20:34:25 2010 (4CE5D421)
fffff880`10b22000 fffff880`10b23180   nvBridge nvBridge.kmd Fri Jul 09 17:07:54 2010 (4C378FAA)
fffff880`0fe90000 fffff880`10b21e00   nvlddmkm nvlddmkm.sys Fri Jul 09 17:15:58 2010 (4C37918E)
fffff880`02d4b000 fffff880`02d71000   pacer    pacer.sys    Mon Jul 13 20:09:41 2009 (4A5BCCC5)
fffff880`00e0d000 fffff880`00e22000   partmgr  partmgr.sys  Mon Jul 13 19:19:58 2009 (4A5BC11E)
fffff880`00fcb000 fffff880`00ffe000   pci      pci.sys      Mon Jul 13 19:19:51 2009 (4A5BC117)
fffff880`00e93000 fffff880`00e9a000   pciide   pciide.sys   Mon Jul 13 19:19:49 2009 (4A5BC115)
fffff880`00e9a000 fffff880`00eaa000   PCIIDEX  PCIIDEX.SYS  Mon Jul 13 19:19:48 2009 (4A5BC114)
fffff880`013c9000 fffff880`013da000   pcw      pcw.sys      Mon Jul 13 19:19:27 2009 (4A5BC0FF)
fffff880`06ca9000 fffff880`06d4f000   peauth   peauth.sys   Mon Jul 13 21:01:19 2009 (4A5BD8DF)
fffff880`05ec8000 fffff880`05f05000   portcls  portcls.sys  Mon Jul 13 20:06:27 2009 (4A5BCC03)
fffff880`00cc1000 fffff880`00cd5000   PSHED    PSHED.dll    Mon Jul 13 21:32:23 2009 (4A5BE027)
fffff880`0fe00000 fffff880`0fe24000   rasl2tp  rasl2tp.sys  Mon Jul 13 20:10:11 2009 (4A5BCCE3)
fffff880`0fe53000 fffff880`0fe6e000   raspppoe raspppoe.sys Mon Jul 13 20:10:17 2009 (4A5BCCE9)
fffff880`0fe6e000 fffff880`0fe8f000   raspptp  raspptp.sys  Mon Jul 13 20:10:18 2009 (4A5BCCEA)
fffff880`10bde000 fffff880`10bf8000   rassstp  rassstp.sys  Mon Jul 13 20:10:25 2009 (4A5BCCF1)
fffff880`02daf000 fffff880`02e00000   rdbss    rdbss.sys    Mon Jul 13 19:24:09 2009 (4A5BC219)
fffff880`04161000 fffff880`0416c000   rdpbus   rdpbus.sys   Mon Jul 13 20:17:46 2009 (4A5BCEAA)
fffff880`0199c000 fffff880`019a5000   RDPCDD   RDPCDD.sys   Mon Jul 13 20:16:34 2009 (4A5BCE62)
fffff880`06ec5000 fffff880`06ef3000   rdpdr    rdpdr.sys    Mon Jul 13 20:18:02 2009 (4A5BCEBA)
fffff880`019a5000 fffff880`019ae000   rdpencdd rdpencdd.sys Mon Jul 13 20:16:34 2009 (4A5BCE62)
fffff880`019ae000 fffff880`019b7000   rdprefmp rdprefmp.sys Mon Jul 13 20:16:35 2009 (4A5BCE63)
fffff880`06f0d000 fffff880`06f45000   RDPWD    RDPWD.SYS    Mon Jul 13 20:16:47 2009 (4A5BCE6F)
fffff880`0117f000 fffff880`011b9000   rdyboost rdyboost.sys Mon Jul 13 19:34:34 2009 (4A5BC48A)
fffff880`05fe5000 fffff880`05ffd000   rspndr   rspndr.sys   Mon Jul 13 20:08:50 2009 (4A5BCC92)
fffff880`10b24000 fffff880`10b8a000   Rt64win7 Rt64win7.sys Fri Dec 24 02:30:25 2010 (4D144C11)
fffff880`05c6c000 fffff880`05ec7d80   RTKVHD64 RTKVHD64.sys Fri Sep 03 04:02:27 2010 (4C80AB93)
fffff880`06d5f000 fffff880`06d6a000   secdrv   secdrv.SYS   Wed Sep 13 09:18:38 2006 (4508052E)
fffff880`015db000 fffff880`015e3000   spldr    spldr.sys    Mon May 11 12:56:27 2009 (4A0858BB)
fffff880`06e11000 fffff880`06ea7000   srv      srv.sys      Thu Aug 26 23:38:00 2010 (4C773318)
fffff880`06c00000 fffff880`06c67000   srv2     srv2.sys     Thu Aug 26 23:37:46 2010 (4C77330A)
fffff880`06d6a000 fffff880`06d97000   srvnet   srvnet.sys   Thu Aug 26 23:37:24 2010 (4C7732F4)
fffff880`04267000 fffff880`04268480   swenum   swenum.sys   Mon Jul 13 20:00:18 2009 (4A5BCA92)
fffff880`01603000 fffff880`01800000   tcpip    tcpip.sys    Sun Jun 13 23:39:04 2010 (4C15A458)
fffff880`06d97000 fffff880`06da9000   tcpipreg tcpipreg.sys Mon Jul 13 20:09:49 2009 (4A5BCCCD)
fffff880`019f1000 fffff880`019fe000   TDI      TDI.SYS      Mon Jul 13 19:21:18 2009 (4A5BC16E)
fffff880`06ef3000 fffff880`06efe000   tdtcp    tdtcp.sys    Mon Jul 13 20:16:32 2009 (4A5BCE60)
fffff880`019d3000 fffff880`019f1000   tdx      tdx.sys      Mon Jul 13 19:21:15 2009 (4A5BC16B)
fffff880`02d9b000 fffff880`02daf000   termdd   termdd.sys   Mon Jul 13 20:16:36 2009 (4A5BCE64)
fffff960`005d0000 fffff960`005da000   TSDDD    TSDDD.dll    Mon Jul 13 20:16:34 2009 (4A5BCE62)
fffff880`06efe000 fffff880`06f0d000   tssecsrv tssecsrv.sys Mon Jul 13 20:16:41 2009 (4A5BCE69)
fffff880`040f2000 fffff880`04118000   tunnel   tunnel.sys   Mon Jul 13 20:09:37 2009 (4A5BCCC1)
fffff880`04043000 fffff880`04055000   umbus    umbus.sys    Mon Jul 13 20:06:56 2009 (4A5BCC20)
fffff880`05f7d000 fffff880`05f9a000   usbccgp  usbccgp.sys  Mon Jul 13 20:06:45 2009 (4A5BCC15)
fffff880`0415f000 fffff880`04160f00   USBD     USBD.SYS     Mon Jul 13 20:06:23 2009 (4A5BCBFF)
fffff880`04256000 fffff880`04267000   usbehci  usbehci.sys  Mon Jul 13 20:06:30 2009 (4A5BCC06)
fffff880`0406e000 fffff880`040c8000   usbhub   usbhub.sys   Mon Jul 13 20:07:09 2009 (4A5BCC2D)
fffff880`04200000 fffff880`04256000   USBPORT  USBPORT.SYS  Mon Jul 13 20:06:31 2009 (4A5BCC07)
fffff880`043aa000 fffff880`043b7000   usbuhci  usbuhci.sys  Mon Jul 13 20:06:27 2009 (4A5BCC03)
fffff880`00e00000 fffff880`00e0d000   vdrvroot vdrvroot.sys Mon Jul 13 20:01:31 2009 (4A5BCADB)
fffff880`01959000 fffff880`01967000   vga      vga.sys      Mon Jul 13 19:38:47 2009 (4A5BC587)
fffff880`01967000 fffff880`0198c000   VIDEOPRT VIDEOPRT.SYS Mon Jul 13 19:38:51 2009 (4A5BC58B)
fffff880`015cb000 fffff880`015db000   vmstorfl vmstorfl.sys Mon Jul 13 19:42:54 2009 (4A5BC67E)
fffff880`00e22000 fffff880`00e37000   volmgr   volmgr.sys   Mon Jul 13 19:19:57 2009 (4A5BC11D)
fffff880`00e37000 fffff880`00e93000   volmgrx  volmgrx.sys  Mon Jul 13 19:20:33 2009 (4A5BC141)
fffff880`01133000 fffff880`0117f000   volsnap  volsnap.sys  Mon Jul 13 19:20:08 2009 (4A5BC128)
fffff880`02d80000 fffff880`02d9b000   wanarp   wanarp.sys   Mon Jul 13 20:10:21 2009 (4A5BCCED)
fffff880`0198c000 fffff880`0199c000   watchdog watchdog.sys Mon Jul 13 19:37:35 2009 (4A5BC53F)
fffff880`00eae000 fffff880`00f52000   Wdf01000 Wdf01000.sys Mon Jul 13 19:22:07 2009 (4A5BC19F)
fffff880`00f52000 fffff880`00f61000   WDFLDR   WDFLDR.SYS   Mon Jul 13 19:19:54 2009 (4A5BC11A)
fffff880`02d42000 fffff880`02d4b000   wfplwf   wfplwf.sys   Mon Jul 13 20:09:26 2009 (4A5BCCB6)
fffff960`00050000 fffff960`00360000   win32k   win32k.sys   Tue Oct 19 23:08:46 2010 (4CBE5D3E)
fffff880`043db000 fffff880`043e4000   wmiacpi  wmiacpi.sys  Mon Jul 13 19:31:02 2009 (4A5BC3B6)
fffff880`00fb8000 fffff880`00fc1000   WMILIB   WMILIB.SYS   Mon Jul 13 19:19:51 2009 (4A5BC117)
fffff880`05c23000 fffff880`05c44000   WudfPf   WudfPf.sys   Mon Jul 13 20:05:37 2009 (4A5BCBD1)
fffff880`06fc4000 fffff880`06ff5000   WUDFRd   WUDFRd.sys   Mon Jul 13 20:06:06 2009 (4A5BCBEE)

Unloaded modules:
fffff880`06f45000 fffff880`06fb6000   spsys.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffff880`06f45000 fffff880`06fb6000   spsys.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffff880`0418a000 fffff880`041bb000   WUDFRd.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffff880`018b8000 fffff880`018c6000   crashdmp.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffff880`018c6000 fffff880`018d2000   dump_ataport
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffff880`018d2000 fffff880`018db000   dump_atapi.s
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffff880`018db000 fffff880`018ee000   dump_dumpfve
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffff880`041bb000 fffff880`041ec000   WUDFRd.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffff880`0418a000 fffff880`041bb000   WUDFRd.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
2: kd> !sysinfo cpuinfo
[CPU Information]
~MHz = REG_DWORD 2798
Component Information = REG_BINARY 0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0
Configuration Data = REG_FULL_RESOURCE_DESCRIPTOR ff,ff,ff,ff,ff,ff,ff,ff,0,0,0,0,0,0,0,0
Identifier = REG_SZ Intel64 Family 6 Model 26 Stepping 5
ProcessorNameString = REG_SZ Intel(R) Core(TM) i7 CPU         930  @ 2.80GHz
Update Signature = REG_BINARY 0,0,0,0,11,0,0,0
Update Status = REG_DWORD 6
VendorIdentifier = REG_SZ GenuineIntel
MSR8B = REG_QWORD 1100000000

eim · Feb 9, 2011

Finaly i found something... i have tested all my ram-sticks i slot #0, one by one, for about 7-10 hours each. 2 of the sticks showed no errors, but when i tested the last RAM-stick it finaly showed some errors. All errors ocured in Test #5, "Block move, 80 Moves" and all att 1472,5MB and 1536,5MB

Im currently running my computer with only 2 sticks, so far so good. Im a n00b for real... (last time i tested my RAM i did run the test with 2 stick in.... did not find any errors then.)

Im so grateful for all the help CarlTR6.

Contacted my reseller now, i'll make sure they send me a new kit RAM

BSOD + random crash

eim

New member

My Computer

eim

New member

My Computer

CarlTR6

Antique Senior Member

My Computer

eim

New member

My Computer

CarlTR6

Antique Senior Member

My Computer

eim

New member

My Computer

CarlTR6

Antique Senior Member

My Computer

eim

New member

My Computer

CarlTR6

Antique Senior Member

My Computer

eim

New member

My Computer

CarlTR6

Antique Senior Member

My Computer

eim

New member

My Computer